<HTML><HEAD></HEAD><BODY>

Test 412.  escape the colon.  Attack due to Mario Heiderich.

<IMG SRC="javascript&colon;alert(412)"></IMG>
<IFRAME SRC="javascript&colon;alert(412)"></IFRAME>
<A HREF="javascript&colon;alert(412)">clicky</A>
</BODY></HTML>
